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WHAT IS CLAIMED IS: 



1. An encapsulated document structure 
comprising : 

a document information file storing document 
information that is a substance of expression of a 
document; and 

an operating program file storing an operating 
program that materializes the document information, a 
limitation being given to the operating program by a 
security function when the operating program is 
interpreted and executed by a computer, 

wherein the document information file and the 
operating program file are encapsulated as a single 
document . 



2. The encapsulated document structure as 
claimed in claim 1 , wherein the security function of 
said operating program file is controlled based on 
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specific decryption key information for decrypting 
encrypted digital information. 



3. The encapsulated document structure as 
claimed in claim 2, further comprising encapsulating 
means for encapsulating said decryption key information, 
said operating program file and said document 
information file into a single document. 



4. The encapsulated document structure as 
claimed in claim 3, wherein encapsulating means 
encapsulates said decryption information, said operating 
program file and said document information file into a 
single file. 



5. The encapsulated document structure as 



claimed in claim 3, wherein said decryption key 
information is signed and encrypted by a third party 
authority . 



6. The encapsulated document structure as 
claimed in claim 3, wherein said operating program is 
started by an external start program that is interpreted 
and executed by said computer. 



7. The encapsulated document structure as 
claimed in claim 6, wherein said operating program file 
is described by an intermediate language code, and runs 
by interpreting and executing the intermediate language 
code . 



8. The encapsulated document structure as 



claimed in claim 6, wherein said operating program is 
decrypted and started by said start program in 
accordance with said decryption key information. 



9. The encapsulated document structure as 
claimed in claim 6, wherein said operating program 
started by said start program operates within 
predetermined operation rights . 



10. The encapsulated document structure as 
claimed in claim 3 , wherein said decryption key 
information includes link information of URL. 



11. The encapsulated document structure as 
claimed in claim 3, wherein a storage area of said 
operating program is described therein. 
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12. The encapsulated document structure as 
claimed in claim 3, further comprising a start program 
file storing a start program that is interpreted and 
executed by said computer to start said encapsulated 
document file, wherein, when a file identifier of said 
encapsulated document file is changed, said operating 
program file is started by said start program. 



13. The encapsulated document structure as 
claimed in claim 12, further comprising signature 
determining means for determining whether the signature 
information in said encapsulated document is true or 
false, wherein, when said signature information is fals 
an unfair act process for performing a predetermined 
operation to avoid a problem caused by an unfair act 
performed with respect to the encapsulated document. 



14 . The encapsulated document structure as 
claimed in claim 12, wherein said start program displays 
the signature information of said operating program to 
be started or said encapsulated document so as to cause 
a user to check the start. 



15. The encapsulated document structure as 
claimed in claim 14, wherein said start program file 
includes signature retaining means for retaining 
signature information, and said start program compare 
the signature information retained by said signature 
retaining means with the signature information in said 
encapsulated document so as to eliminate a signature 
display to the user when the signature information 
retained by said signature retaining means matches the 
signature information in said encapsulated document. 
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16. The encapsulated document structure as 
claimed in claim 3, further comprising: a start program 
file storing a start program that is interpreted and 
executed by said computer; and an installation program 
file storing an installation program that installs said 
start program in said computer when a file identifier of 
said encapsulated document file is changed. 



17. The encapsulated document structure as 
claimed in claim 16, further comprising signature 
determining means for determining whether the signature 
information in said encapsulated document is true or 
false, wherein, when said signature information is false, 
an unfair act process for performing a predetermined 
operation to avoid a problem caused by an unfair act 
performed with respect to the encapsulated document. 



18. The encapsulated document structure as 
claimed in claim 16, wherein said start program displays 
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the signature information of said operating program to 
be started or said encapsulated document so as to cause 
a user to check the start. 



19. The encapsulated document structure as 
claimed in claim 18 , wherein said start program file 

10 includes signature retaining means for retaining 

signature information, and said start program compare 
the signature information retained by said signature 
retaining means with the signature information in said 
encapsulated document so as to eliminate a signature 

15 display to the user when the signature information 

retained by said signature retaining means matches the 
signature information in said encapsulated document. 



20 

20. The encapsulated document structure as 
claimed in claim 1, further comprising encapsulating 
means for encapsulating said document * information file 
25 and said operating program file into a single file, 
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wherein said operating program is started by an external 
start program and is limited in operation rights thereof. 



21. The encapsulated document structure as 
claimed in claim 20, wherein said single file is signed 
and encrypted. 



22 . The encapsulated document structure as 
claimed in claim 20, wherein said operating program is 
limited in operation rights thereof based on signature 
information regarding said operating program. 



23. The encapsulated document structure as 
claimed in claim 20, wherein an input and output of said 
operating program started by said start program is 
performed through an input and output library provided 



in said operating program. 



24. The encapsulated document structure as 
claimed in claim 21, wherein said encapsulated document 
includes signature information, and said operating 
program starts said operating program in accordance with 
the signature information. 



25. The encapsulated document structure as 
claimed in claim 1, wherein said contents information 
file includes: 

at least one contents file that serves as a 
substance of expression on a document; and 

a document structure file specifying a 
structure of the contents file and a display status on 
said document. 



26. The encapsulated document structure as 
claimed in claim 6, further comprising an icon file 
regarding an icon displayed on a display of said 
computer in accordance with substantive data of said 
document, wherein a selective designation of said icon 
is determined as an accessing operation to said document 
by said computer. 



27. The encapsulated document structure as 
claimed in claim 25, further comprising a library file 
storing said contents file with an index indicating a 
storing location thereof, wherein said operating program 
file specifies said contents file according to said 
index . 



28. The encapsulated document structure as 
claimed in claim 25, further comprising a library file 
storing said contents file provided with a specific 



header, wherein said operating program file specifies 
said contents file according to said header. 



29. The encapsulated document structure as 
claimed in claim 25, wherein said document contents fil 
is described by a general-purpose data description 
language .- 



30. The encapsulated document structure as 
claimed in claim 29, wherein said data description 
language uses a tag to describe a structure of said 
contents file and an element specifying the display 
status on said document. 



31. The encapsulated document structure as 
claimed in claim 30, wherein said operating program fil 



is provided in accordance with a file format specified 
by said contents file described using said tag. 



32. The encapsulated document structure as 
claimed in claim 25, wherein said operating program fil 
is provided with a part as minimum unit necessary for 
processing said contents file. 



33. The encapsulated document structure as 
claimed in claim 25, further comprising: 

a file of a digital information display 
program for causing said contents file accessible on a 
display of said computer; and 

a file of a functional operation program for 
performing a specific function without referring to 
digital information of said contents file. 
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34. The encapsulated document structure as 
claimed in claim 33, wherein said digital information 
display program has a function to display a file 
specifying panel for displaying file specifying 
information that specifies said contents file in a 
selectable state, and a function to causing said 
contents file, which corresponds to a case where said 
file specifying information is selected, accessible on 
said display of said computer. 



35. The encapsulated document structure as 
claimed in claim 33, wherein said functional operation 
program has a function to display a function panel for 
function specifying information that specifies a 
predetermined function in a selectable state, and a 
function to perform said predetermined function that 
corresponds to a case where said function specifying 
information is selected. 
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36. The encapsulated document structure as 
claimed in claim 33, wherein said digital information 
display program has a scaling function to enlarge or 
reduce a displayed image based on said contents file. 



37 . The encapsulated document structure as 
claimed in claim 33, wherein said digital information 
display program has a view changing function to change 
viewpoint when a displayed image based on said contents 
file is a three-dimensional image. 



38. The encapsulated document structure as 
claimed in claim 33, wherein said digital information 
display program has a function, when a displayed image 
based on said contents file is a dynamic image, to 
display a static image extracted from the dynamic in 
said document in a selectable state, and a function to 
reproduce the dynamic image when the static image is 
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selected . 



5 

39. The encapsulated document structure as 
claimed in claim 33, wherein said digital information 
display program has a function to display, when said 
contents file includes audio information, a reproduction 

10 panel for causing the audio information designatable , 

and a function, to reproduce the audio information when a 
reproduction of said audio information is designated 
through said reproduction panel . 

15 

40. The encapsulated document structure as 
claimed in claim 39, wherein said digital information 

20 display program has a function to display, when a 

reproduction of said audio information is designated 
through said reproduction panel, text information 
corresponding to said audio information. 



25 
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41. The encapsulated document structure as 
claimed in claim 1, further comprising a feature amount 
retaining file retaining an encrypted feature amount 
regarding said program file, the feature amount 
retaining file being encapsulated into said single file 



42 . The encapsulated document structure as 
claimed in claim 41 , wherein said feature amount 
retaining file also retains an encrypted feature amount 
regarding said document information file. 



43. The encapsulated document structure as 
claimed in claim 41, wherein said feature amount 
retaining file retains decryption key information used 
for decrypting the encrypted feature amount regarding 
said operating program file. 



44. The encapsulated document structure as 
claimed in claim 41, wherein said feature amount 
retaining file retains location information which 
indicates decryption key information used for decryptin 
the encrypted feature amount regarding said operating 
program file. 



45. The encapsulated document structure as 
claimed in claim 43, wherein a different set of said 
decryption key information is related to each operating 
program file. 



46. The encapsulated document structure as 
claimed in claim 44, wherein a different set of said 
decryption key information is related to each operating 
program file. 
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47. The encapsulated document structure as 

claimed in claim 41, wherein the feature amount 

regarding said operating program file is encrypted by 
public key encryption method. 



48. The encapsulated document structure as 
claimed in claim 43, wherein said decryption key 
information is signed and encrypted by a third party 
authentication authority . 



49. The encapsulated document structure as 
claimed in claim 41, wherein the feature amount 
regarding said operating program file is encrypted by 
private key encryption method. 



50. The encapsulated document structure as 
claimed in claim 41, further comprising a feature amount 
verification program for performing a verification of a 
tamper on said operating program file, the feature 
amount verification program being encapsulated into said 
single file. 



51. The encapsulated document structure as 
claimed in claim 1, wherein a feature amount of the 
operating program in said operating program file is 
stored outside said single document. 



52. The encapsulated document structure as 
claimed in claim 51, wherein the feature amount 
regarding said operating program file is encrypted by a 
public key encryption method. 



53. The encapsulated document structure as 
claimed in claim 51 wherein the feature amount regarding 
said operating program file is encrypted by a private 
key encryption system. 



54. The encapsulated document structure as 
claimed in claim 51, further comprising a feature amount 
verification program for performing a verification of a 
tamper on said operating program file, the feature 
amount verification program being encapsulated into said 
single file. 



55. An encapsulated document structure 
comprising : 

a document information file storing contents 



information that is a substance of expression on a 
document ; 

location information indicating a location 
where an operating program file is stored, the operating 
program file storing an operating program for 
materializing the document information file; and 

a feature amount retaining file retaining an 
encrypted feature amount regarding said operating 
program file, 

• wherein said document information file, said 
location information and said feature amount retaining 
file are encapsulated into a single file. 



56. The encapsulated document structure as 
claimed in claim 55, wherein said feature amount 
retaining file also retains an encrypted feature amount 
regarding said document information file. 



57. The encapsulated document structure as 



claimed in claim 55, wherein said feature amount 
retaining file retains decryption key information used 
for decrypting the encrypted feature amount regarding 
said operating program file. 



58. The encapsulated document structure as 
claimed in claim 55, wherein said feature amount 
retaining file. retains location information which 
indicates decryption key information used for decrypting 
the encrypted feature amount regarding said operating 
program file. 



59. The encapsulated document structure as 
claimed in claim 57, wherein a different set of said 
decryption key information is related to each operating 
program file. 



60. The encapsulated document structure as 
claimed in claim 58, wherein a different set of said 
decryption key information is related to each operating 
program file. 



61. The encapsulated document structure as 
claimed in claim 55 , wherein the feature amount 
regarding said operating program file is encrypted by a 
public key encryption method. 



62. The encapsulated document structure as 
claimed in claim 57 , wherein said decryption key 
information is signed and encrypted by a third party 
authentication authority . 
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63. The encapsulated document structure as 
claimed in claim 55, wherein the feature amount 
regarding said operating program file is encrypted by a 
private key encryption system. 



64. The encapsulated document structure as 
claimed in claim 55, further comprising a feature amount 
verification program for performing a verification of a 
tamper on said operating program file, the feature 
amount verification program being encapsulated into said 
single file. 



65. An encapsulated document structure 
comprising : 

document information file storing contents 
information that is a substance of expression on a 
document; and 

location information indicating a location 
where an operating program file containing an operating 
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program for materializing the document information file 
is stored, 

wherein the document information file and the 
location information are encapsulated into a single file, 
and a feature amount regarding the operating program 
file is stored outside said single file. 



10 

66. The encapsulated document structure as 
claimed in claim 65, wherein the feature amount 
regarding said operating program file is encrypted by a 
public key encryption method. 

15 



67. The encapsulated document structure as 
claimed in claim 66, wherein decryption key information 
used for decrypting the encrypted said operating program 
file is signed and encrypted by a third party 
authentication authority . 



25 
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68. The encapsulated document structure as 
claimed in claim 65, wherein the feature amount 
regarding said operating program file is encrypted by a 
private key encryption system. 



69. The encapsulated document structure as 
claimed in claim 65, further comprising a feature amount 
verification program for performing a verification of a 
tamper on said operating program file, the feature 
amount verification program being encapsulated into said 
single file. 



70. A document file producing apparatus 
producing an electronic document file having an 
encapsulated document structure, said encapsulated 
document structure comprising: 

a document information file storing document 



information that is a substance of expression of a 
document; and 

an operating program file storing an operating 
program that materializes the document information, a 
limitation being given to the operating program by a 
security function when the operating program is 
interpreted and executed by a computer, 

wherein the document information file and the 
operating program file are encapsulated as a single 
document - 



71. The document file producing apparatus as 
claimed in claim 70, wherein said operating program file 
is produced and distributed by an operating program 
provider beforehand . 



72. The document file producing apparatus as 
claimed in claim 70, wherein the security function of 
said operating program file is controlled based on 



specific decryption key information for decrypting 
encrypted digital information. 



73. The document file producing apparatus as 
claimed in claim 72, wherein said specific decryption 
key information is produced and distributed by an 
operating program provider beforehand. 



74. An encapsulated document producing and 
editing apparatus comprising: 

decryption key information provided 
beforehand ; 

an operating program file that is decrypted 
from the decryption key information; and 

encapsulated document producing and editing 
means having user interface means for producing and 
editing a document information file in accordance with a 
user operation and encapsulating means for encapsulating 
the produced document information file, said decryption 



key information and said operating program file into a 
single file. 



75. An encapsulated document producing and 
editing apparatus comprising: 

an- operating program file provided beforehand; 

encapsulated document producing and editing 
means having user interface means for producing and 
editing a document information file in accordance with a 
user operation and encapsulating means for encapsulating 
the produced document information file and said 
operating program file into a single file; and 

decryption means for decrypting the 
encapsulated single file. 



76. An encapsulated document producing and 
editing apparatus comprising: 

encapsulated document producing and editing 
means having user interface means for producing and 



editing a document information file in accordance with a 
user operation; 

an operating program file provided beforehand; 

and 

decryption means for decrypting the produced 
document information file and said operating program 
file, 

wherein said encapsulated document producing 
and editing means has encapsulating means for 
encapsulating the encrypted document information file 
and said operating program file into a single file. 



77. A start program for starting an operating 
program file provided in an encapsulated document 
comprising: decryption key information for decrypting 
encrypted digital information; the operating program 
file that is decrypted in accordance with the decryption 
key information; document information file that is 
materialized on a computer by the decrypted operating 
program; and encapsulating means for encapsulating said 
decryption key information, said operating program file 
and said document information file into a single file, 



said start program comprising: 

reading means for reading the encrypted 
decryption key information and said operating program 
file from said encapsulated document file; 

decryption means for decrypting said 
decryption key information using a public key provided 
by a third party authentication authority, and 
decrypting said operating program using the decrypted 
decryption key information; and 

- operating program starting means for starting 
said decrypted operating program. 



78. The start program as claimed in claim 77, 
further comprising public key information provided by 
said third party authentication authority. 



79. The start program as claimed in claim 77, 
further comprising signature determining means for 
determining whether signature information in said 



encapsulated document is true or false so as to perform 
a process for preventing a problem caused by an unfair 
act that has been applied on said encapsulated document 
file. 



80. The start program as claimed in claim 77, 
further comprising means for displaying the signature 
information of said operating program or said 
encapsulated document to be started on a display of a 
computer so as to request a user to check a start of 
said operating program. 



81. The start program as claimed in claim 80, 
further comprising signature information retaining means 
for retaining signature information so as to compare the 
signature information retained by said signature 
information retaining means with signature information 
provided in said encapsulated document so that a display 
of signature is omitted when the signature information 



retained by said signature information retaining means 
matches the signature information provided in said 
encapsulated document. 



82 . An encapsulated document producing 
apparatus comprising : 

document information file acquisition means 
for acquiring a document information file storing 
contents information that is a substance of expression 
regarding a document; 

operating program file acquisition means for 
acquiring an operation program file storing an operating 
program, which is interpreted and executed by a computer 
for materializing said document information file 
acquired by said document information file acquisition 
means ; 

feature amount computing means for computing a 
feature amount of said operating program file; 

feature amount retaining file producing means 
for encrypting the feature amount of said operating 
program file computed by said feature amount computing 
means, and saving the encrypted feature amount in a 
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feature amount retaining file; and 

encapsulating means for encapsulating said 
document information file, said operating program file 
and said feature amount retaining file into a single 
document . 



83. The encapsulated document producing 
apparatus as claimed in claim 82, further comprising 
document information feature amount computing means for 
computing a feature amount of said document information 
file so as to encrypt the computed feature amount of 
said document information file with encryption key 
information and save the encrypted feature amount in 
said feature amount retaining file. 



84. A program tamper verification method 
performed by an information processing unit for 
verifying a tamper on an operating program file that 
materializes a document information file that is a 



substance of expression regarding a document, the 
operating program file and the document information file 
are encapsulated into an encapsulated document file, the 
program tamper verification method comprising the steps 
of: 

computing a feature amount of said operating 
program file in said encapsulated document file when 
materializing said document information file; 

decrypting an encrypted feature amount of said 
operating program file that was been retained; 

comparing the decrypted feature amount of said 
operating program file with the computed feature amount 
of said operating program file; 

limiting materialization of said document 
information file performed by said operating program 
file when the decrypted feature amount of said operating 
program file does not match the computed feature amount 
of said operating program file. 



85. A program tamper verification method 
performed by an information processing unit for 
verifying a tamper on an operating program file that 
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materializes a document information file that is a 
substance of expression regarding a document, the 
operating program file and the document information file 
are encapsulated into an encapsulated document file, the 
program tamper verification method comprising the steps 
of: 

computing a feature amount of said operating 
program file stored at a location indicated by location 
information retained in said encapsulated document file 
when materializing said document information file; 

decrypting a decrypted feature amount of said 
operating program previously retained; 

comparing the decrypted feature amount of said 
operating program file with the computed feature amount 
of said operating program file; 

limiting materialization of said document 
information file performed by said operating program 
file when the decrypted feature amount of said operating 
program file does not match the computed feature amount 
of said operating program file. 



86. A tamper verification apparatus 
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comprising : 

reading means for reading an encapsulated 
document file having an encapsulated document structure 
and 

tamper verification means for performing 
verification of a tamper on an operating program stored 
in said encapsulated document file based on a feature 
amount of said operating program file that materializes 
a document information file stored in said encapsulated 
document - file and read by said reading means, 

wherein said encapsulated document structure 
comprises the document information file, the operating 
program file and a feature amount retaining file that 
retains an encrypted feature amount of said operating 
program . 



87. The tamper verification apparatus as 
claimed in claim 86, wherein said tamper verification 
means includes : 

decryption means for decrypting the encrypted 
feature amount of said operating program file retained 
by said feature amount retaining file stored in said 
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encapsulated document file and read by said reading 
means ; 

feature amount computation means for computing 
a feature amount of said operation program file stored 
in said encapsulated document file; and 

tamper verification execution means for 
performing the verification of a tamper on said 
operating program file based on the computed feature 
amount of said operating program file computed by said 
feature amount computation means and the decrypted 
feature amount. of said operating program file decrypted 
by said decryption means . 



88. The tamper verification apparatus as 
claimed in claim 86, wherein said tamper verification 
means includes : 

feature amount computation means for computing 
a feature amount of said operating program file stored 
in said encapsulated document file read by said reading 
means ; and 

tamper verification execution means for 
performing the verification of a tamper on said 



-383- 

operating program file based on the computed feature 
amount of said operating program file computed by said 
feature amount computation means and a feature amount of 
said operating program file stored in a start program. 



89. The tamper verification apparatus as 
claimed in claim 86, wherein said tamper verification 
means includes : 

feature amount computation means for computing 
a feature amount of said operating program file stored 
in said encapsulated document file read by said reading 
means ; 

encryption means for encrypting the computed 
feature amount of said operating program file computed 
by said feature amount computation means; and 

tamper verification execution means for 
performing the verification of a tamper on said 
operating program file based on the encrypted feature 
amount of said operating program file encrypted by said 
encryption means and a decrypted feature amount of said 
operating program file retained in a feature amount 
retaining file stored in said encapsulated document file. 
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90. The tamper verification apparatus as 
claimed in claim 86, wherein said tamper verification 
means includes: 

feature amount computation means for computing 
a feature amount of a feature amount verification 
program file stored in said encapsulated document file 
and read by said reading means; 

determining means for determining whether or 
not to execute said feature amount verification program 
file based on the computed feature amount of said 
feature amount verification program file computed by- 
said feature amount computation means and a feature 
amount of said feature amount verification program file 
stored in a start program; and 

tamper verification execution means for 
performing verification of a tamper on said operating 
program file when said- feature amount verification 
program file is determined by said determining means to 
be executed. 
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91. Am encapsulated document producing 
process program causing a computer to perform the 
functions of : 

acquiring a document information file 
installed in said computer, the document information 
file containing contents information that is a substance 
of expression regarding a document; 

acquiring an operating program file that is 
interpreted and executed by said computer so as to 
materialize said document information file acquired by 
said function of acquiring the document information 
file; 

computing a feature amount of said operating 
program file; 

encrypting the feature amount of said 
operating program file computed by said function of 
computing the feature amount by using decryption key 
information ; 

saving the decrypted feature amount of said 
operating program file in a feature amount retaining 
file; and 

encapsulating said document information file, 
said operating program file and said feature amount 
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retaining file into a single document file 



5 

92 . The encapsulated document producing 
process program as claimed in claim 91, further 
comprising the functions of: 

causing said computer to perform a function of 
10 computing the feature amount of said document 
information file; 

decrypting the computed feature amount of said 
document information file by using decryption key 
information; and 
15 saving the decrypted feature amount of said 

document information file in said feature amount 
retaining file. 



20 

93. A processor readable storage medium 
storing an encapsulated document producing process 
program causing a computer to perform the functions of: 
25 acquiring a document information file 
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installed in said computer, the document information 
file containing contents information that is a substance 
of expression regarding a document; 

acquiring an operating program file that is 
5 interpreted and executed by said computer so as to 

materialize said document information file acquired by 
said function of acquiring the document information 
file; 

computing a feature amount of said operating 
10 program file; 

encrypting the feature amount of said 
operating program file computed by said function of 
computing the feature amount by using decryption key 
information ; 

15 saving the decrypted feature amount of said 

operating program file in a feature amount retaining 
file; and 

encapsulating said document information file, 
said operating program file and said feature amount 
20 retaining file into a single document file. 



25 



94. The processor readable storage medium as 
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claimed in claim 93, wherein said encapsulated document 
producing process program further comprising the 
functions of : 

causing said computer to perform a function of 
computing the feature amount of said document 
information file; 

decrypting the computed feature amount of said 
document information file by using decryption key 
information; and 

saving the decrypted feature amount of said 
document information file in said feature amount 
retaining file. 



95. A start program causing a computer to 
perform the functions of: 

reading an encapsulated document file having 
an encapsulated document structure; and 

performing verification of a tamper on an 
operating program stored in said encapsulated document 
file based on a feature amount of said operating program 
file that materializes a document information file 
stored in said encapsulated document file and read by 



-389- 

said reading means , 

wherein said encapsulated document structure 
comprises the document information file, the operating 
program file and a feature amount retaining file that 
retains an encrypted feature amount of said operating 
program . 



96. The start program as claimed in claim 95 
wherein said function of performing the verification 
includes the function of: 

decrypting the encrypted feature amount of 
said operating program file retained by said feature 
amount retaining file stored in said encapsulated 
document file and read by said function of reading; 

computing a feature amount of said operation 
program file stored in said encapsulated document file; 
and 

performing the verification of a tamper on 
said operating program file based on the computed 
feature amount of said operating program file computed 
by said feature amount computation means and the 
decrypted feature amount of said operating program file 



-390- 



decrypted by said decryption means. 



5 

97. The start program as claimed in claim 95, 
wherein said function of performing verification 
includes the function of: 

computing a feature amount of said operating 
10 program file stored in said encapsulated document file 
read by said function of reading; and 

performing the verification of a tamper on 
said operating program file based on the computed 
feature amount of said operating program file computed 
15 by said function of computing the feature amount and a 
feature amount of said operating program file stored in 
said start program. 



20 

98. The start program as claimed in claim 95 , 
wherein said function of performing verification 
includes the function of: 
25 computing a feature amount of said operating 



program file stored in said encapsulated document file 
read by said function of reading; 

encrypting the computed feature amount of said 
operating program file computed by said function of 
computing the feature amount; and 

performing the verification of a tamper on 
said operating program file based on the encrypted 
feature amount of said operating program file encrypted 
by said function of encrypting and a decrypted feature 
amount of said operating program file retained in a 
feature amount, retaining file stored in said 
encapsulated document file. 



99. The start program as claimed in claim 95, 
wherein said function of performing verification 
includes the function of: 

computing a feature amount of a feature amount 
verification program file stored in said encapsulated 
document file and read by said function of reading; 

determining whether or not to execute said 
feature amount verification program file based on the 
computed feature amount of said feature amount 
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verif ication program file computed by said function of 
computing the feature amount and a feature amount of 
said feature amount verification program file stored in 
said start program; and 

performing verification of a tamper on said 
operating program file when said feature amount 
verification program file is determined by said 
determining means to be executed. 



100. A processor readable storage medium 
storing a start program causing a computer to perform 
the functions of : 

reading an encapsulated document file having 
an encapsulated document structure; and 

performing verification of a tamper on an 
operating program stored in said encapsulated document 
file based on a feature amount of said operating program 
file that materializes a document information file 
stored in said encapsulated document file and read by 
said reading means, 

wherein said encapsulated document structure 
comprises the document information file, the operating 
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program file and a feature amount retaining file that 
retains an encrypted feature amount of said operating 
program . 



101. The processor readable storage medium as 
claimed in claim 100, wherein said function of 

10 performing the verification includes the function of: 
decrypting the encrypted feature amount of 
said operating program file retained by said feature 
amount retaining file stored in said encapsulated 
document file and read by said function of reading; 

15 computing a feature amount of said operation 

program file stored in said encapsulated document file; 
and 

performing the verification of a tamper on 
said operating program file based on the computed 
20 feature amount of said operating program file computed 
by said feature amount computation means and the 
decrypted feature amount of said operating program file 
decrypted by said decryption means. 



25 



102. The processor readable storage medium a 
claimed in claim 100, wherein said function of 
performing the verification includes the function of: 

computing a feature amount of said operating 
program file stored in said encapsulated document file 
read by said function of reading; and 

performing the verification of a tamper on 
said operating program file based on the computed 
feature amount of said operating program file computed 
by said function of computing the feature amount and a 
feature amount of said operating program file stored in 
said start program. 



103. The processor readable storage medium as 
claimed in claim 100, wherein said function of 
performing the verification includes the function of: 

computing a feature amount of said operating 
program file stored in said encapsulated document file 
read by said function of reading; 

encrypting the computed feature amount of said 
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operating program file computed by said function of 
computing the feature amount; and 

performing the verification of a tamper on 
said operating program file based on the encrypted 
5 feature amount of said operating program file encrypted 
by said function of encrypting and a decrypted feature 
amount of said operating program file retained in a 
feature amount retaining file stored in said 
encapsulated document file. 



104. The processor readable storage medium as 
15 claimed in claim 100, wherein said function of 

performing the verification includes the function of: 

computing a feature amount of a feature amount 
verification program file stored in said encapsulated 
document file and read by said function of reading; 
20 determining whether or not to execute said 

feature amount verification program file based on the 
computed feature amount of said feature amount 
verification program file computed by said function of 
computing the feature amount and a feature amount of 
25 said feature amount verification program file stored in 
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said start program; and 

performing verification of a tamper on said 
operating program file when said feature amount 
verification program file is determined by said 
5 determining means to be executed. 



10 105. An electronic document file comprising: 

a plurality of operating programs and 
operating program use information provided by an 
operating program provider; and 

a contents file and contents use information 
15 produced by said operating program provider or a 
document producer. 



20 

106. The electronic document file as claimed 
in claim 105, wherein at least one of said operating 
programs is an operation verification program that 
operates other operating programs based on said 
25 operating program use information. 



107. The electronic document file as claimed 
in claim 105, wherein at least one of said operating 
programs is a contents verification program that limits 
a use of said contents file based on said contents file 
use information. 



108. The electronic document file as claimed 
in claim 105 , wherein at least one of said operating 
programs is an operation verification program that 
operates other operating programs based on said 
operating program use information, and at least one of 
said operating programs is a contents verification 
program that limits a use of said contents file based on 
said contents file use information. 
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109. The electronic document file as claimed 
in claim 106, wherein said operation verification 
program verifies a tamper on said operating programs and 
said operating program use information. 



110. The electronic document file as claimed 
in claim -106, wherein said operation verification 
program limits an operation of said operating programs. 



111. The electronic document file as claimed 
in claim 107, wherein said contents verification program 
verifies a tamper on said contents file and said 
contents file use information. 



in claim 



112 
107 , 



The electronic document file as claimed 
wherein said contents verification program 



limits a use of said contents use file. 



113. The electronic document file as claimed 
in claim 106, wherein, when safety of said operating 
programs is not guaranteed by said operation 
verification program, a user of said electronic document 
file is notified of the fact that safety of said 
operating programs is not guaranteed. 



114. The electronic document file as claimed 
in claim 105, wherein said operating programs, said 
operating program use information, said contents file 
and said contents file use information are encapsulated 
into a single file. 



115. An electronic document file producing 
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apparatus comprising : 

reading means for reading a plurality of 
operating programs and operating program use 
information ; 

contents file producing means for producing a 
contents file and contents file use information; and 

information producing means for producing 
information to be stored in an electronic document file, 

wherein said electronic document file 

comprises : 

a plurality of operating programs and 
operating program use information provided by an 
operating program provider; and 

a contents file and contents use information 
produced by said operating program provider or a 
document producer . 



116. The electronic document file producing 
apparatus as claimed in claim 115, wherein said contents 
file producing means causes one of said operating 
programs of said electronic document file to be executed 
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117. The electronic document file producing 
5 apparatus as claimed in claim 115, further comprises 

operating program adding means for adding said plurality 
of operating programs and said operating program use 
information provided by the operating program provider 
to said electronic document file based on said contents 
0 file and said contents file use information produced by 
said contents file producing means. 



15 

118. The electronic document file producing 
apparatus as claimed in claim 116, further comprises 
operating program adding means for adding said plurality 
of operating programs and said operating program use 
20 information provided by the operating program provider 
to said electronic document file based on said contents 
file and said contents file use information produced by 
said contents file producing means. 



25 
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119. An encapsulated document structure 
comprising : 

an operating program read by a provided-side 
computer connected to a network so as to cause the 
provided-side computer to perform various functions; 

use information regarding an encapsulated 
document provided to said provided-side computer through 
said network; and 

sending location information for sending said 
use information to a providing-side computer connected 
to said network, 

wherein said operating program, said use 
information and said sending location information are 
encapsulated into a single document, and said operating 
program includes use information transmitting program 
for transmitting said use information according to said 
sending location information at a predetermined timing. 



120. The encapsulated document structure as 
claimed in claim 119, wherein and said operating program 
includes : 
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a contents information display program for 
displaying contents information that is a substance of 
expression on a document ; 

a permission information reception program for 
receiving permission information regarding permission of 
display of said contents information form said provided- 
side computer through said network; and 

a contents information display program for 
displaying said contents information in accordance with 
said permission information. 



121. The encapsulated document structure as 
claimed in claim 120, wherein said permission 
information is encrypted feature amount information of 
said contents information; said operating program 
further includes a feature amount determination program 
for determining whether or not the encrypted feature 
amount information is equal to predetermined feature 
amount; and said contents information display program 
displays said contents information in accordance with a 
result of determination of said feature amount 
determination program . 
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122. The encapsulated document structure as 
claimed in claim 121, wherein said feature amount 
determination program determines whether or not the 
encrypted feature amount information of said contents 
information is equal to computed feature amount 
information computed from said contents information 
existing in said encapsulated document, and said 
contents information display program displays said 
contents information when the encrypted feature amount 
information of said contents information is determined 
by said feature amount determination program equal to 
the computed feature amount information computed from 
said contents information existing in said encapsulated 
document . 



123. An encapsulated document structure 
comprising : 

a storage area where contents information, 
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which is a substance of expression on a document, is 
stored ; 

an operating program read by a provided-side 
computer connected to a network so as to cause the 
provided-side computer to perform various functions; and 

use information regarding an encapsulated 
document provided to said provided-side computer through 
said network, 

wherein said storage area, said operating 
program and said use information are encapsulated into a 
single document, and said operating program includes an 
encrypted contents information display program for 
displaying said contents information stored in said 
storage area. 



124. An encapsulated document processing 
apparatus , comprising : 

request information receiving means for 
receiving request information from a provided-side 
computer through a network; 

encapsulated document producing means for 
producing an encapsulated document having a 
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predetermined encapsulated document Structure in 
accordance with the request information received by said 
request information receiving means; and 

encapsulated document transmitting means for 
sending the encapsulated document produced by said 
encapsulated document producing means to said provided- 
side computer through said network, 

wherein said predetermined encapsulated 
document structure comprises: 

an operating program read by said provided- 
side computer connected to a network so as to cause said 
provided-side computer to perform various functions; 

use information regarding an encapsulated 
document provided to said provided-side computer through 
said network; and 

sending location information for sending said 
use information to a providing-side computer connected 
to said network, 

wherein said operating program, said use 
information and said sending location information are 
encapsulated into a single document, and said operating 
program includes use information transmitting program 
for transmitting said use information according to said 
sending location information at a predetermined timing. 
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125. The encapsulated document processing 
apparatus as claimed in claim 124, further comprising: 

charge information producing means for 
producing charge information of use fee of said 
encapsulated document by computing the use fee in 
accordance with said request information received by 
said request information receiving means; 

charge information transmitting means for 
transmitting the charge information of the use fee 
produced by said charge information producing means to 
said provided-side computer through said network; and 

payment information receiving means for 
receiving payment information on the use fee from said 
provided-side computer through said network, 

wherein said encapsulated document 
transmitting means sends said encapsulated document 
produced by said encapsulated document producing means 
to said provided-side computer through network when the 
payment information on the use fee is received by said 
payment information receiving means. 
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126. The encapsulated document processing 
apparatus as claimed in claim 124, wherein said 
encapsulated document producing means includes : 

operating program producing means for 
producing an operating program in accordance with said 
request information received by said request information 
receiving means, the operating program being read by 
said provided-side computer and causing provided-side 
computer to perform various functions; 

use information setting means for setting use 
information regarding said encapsulated document 
provided to said provided-side computer through said 
network; and 

encapsulating means for encapsulating said 
operating program produced by said operating program 
producing means and said use information set by said use 
information setting means into a single document. 



127. The encapsulated document processing 
apparatus as claimed in claim 124, wherein said 
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encapsulated document producing means includes: 
operating program producing means for 
producing an operating program in accordance with said 
request information received by said request information 
receiving means, the operating program being read by 
said provided-side computer and causing provided-side 
computer to perform various functions; 

encryption key producing means for producing 

an encryption key owned by the providing-s ide ; 

operating program encryption means fro encrypting said 

operating program with the encryption key produced by 

said encryption key producing means; 

use information setting means for setting use 

information regarding said encapsulated document 

provided to said provided-side computer through said 

network; and 

encapsulating means for encapsulating said 
operating program encrypted by said operating program 
encrypting means and said use information set by said 
use information setting means into a single file. 



128. An encapsulated document processing 



-410- 



apparatus , comprising : 

use information receiving means for receiving 
use information from a provided-side computer through a 
network ; 

5 charge information producing means for 

producing charge information of use fee of said 
encapsulated document by computing the use fee in 
accordance with said request information received by 
said use information receiving means; 

10 - charge information transmitting means for 

transmitting the charge information of the use fee 
produced by said charge information producing means to 
said provided-side computer through said network; 

payment information receiving means for 

15 receiving payment information on the use fee from said 
provided-side computer through said network; and 

permission information transmitting means for 
transmitting permission information to said provided- 
side computer through said network when the charge 

20 information on the use fee is received by said payment 
information receiving means, the permission information 
for permitting and execution of a saving process of 
contents information that is a substance of expression 
on a document. 
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129. An encapsulated document structure, 
comprising : 

contents information that is a substance of 
expression on a document; 

an operating program read by an accessing-side 
computer connected to a network, the operating program 
causing the accessing-side computer to perform various 
functions; and. 

sending location information for sending 
various kinds of information to a providing-side 
computer connected to said through said network, 

wherein said contents information, said 
operating program and said sending location information 
are encapsulated into a single document, and 

wherein said operating program includes: 

an operation processing program of which 
operation process on said contents information is 
limited based on authority information; and 

a limitation cancellation program for 
canceling a limitation in the operation process of said 
operation processing program by sending various kinds of 
information based on said sending location information. 



130. The encapsulated document structure as 
claimed in claim 129, wherein said contents information 
is encrypted, and said limitation cancellation program 
acquires decryption key information for decrypting the 
encrypted contents document based on said sending 
location . information through said network so as to 
decrypt the encrypted contents information based on the 
decryption key information acquired. 



131. The encapsulated document structure as 
claimed in claim 130, wherein decryption key producing 
information request information is encapsulated into 
said single document together with said contents 
information, said operating program and said sending 
location information, the decryption key producing 
information request information for requesting said 
providing-side computer to send decryption key producing 
information necessary for producing said decryption key 
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inf ormation , and 

said limitation cancellation program includes: 
a decryption key producing information 
requesting program for requesting said decryption key 
5 producing information by sending said decryption key 
producing information request information to said 
providing-side computer through said network based on 
said sending location information; 

decryption key producing information reception 
10 program for receiving said decryption key producing 

information from said providing-side computer through 
said network; 

a decryption key producing program for 
producing said decryption key information based on said 
15 decryption key producing information received by said 

decryption key producing information reception program; 
and 

a decryption program for decrypting the 
encrypted contents information based on said decryption 
20 key information produced by said decryption key 
producing program. 



25 
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132. An encapsulated document processing 
apparatus , comprising : 

storage area acquisition means for acquiring a 
storage area where contents information, which is a 
5 substance of expression on a document, is saved; 

request information receiving means for 
receiving request information through from a provided- 
side computer through a network; 

operating program producing means for 
10 prpducing and operating program in accordance with said 
request information received by said request information 
receiving means, the operating program being read by 
said an accessing-side computer and causing said 
accessing-side computer to perform various kinds of 
15 functions; 

sending location information setting means for 
setting sending location information for sending various 
kinds of information to a providing-side computer 
through said network; 

20 encapsulation means for encapsulating said 

storage area, said operating program produced by said 
operating program producing program and said sending 
location information set by said sending location 
information setting means into a single document; and 

25 encapsulated document transmitting means for 



transmitting the encapsulated document produced by said 
encapsulating means to said provided-side computer 
through said network, 

wherein said operating program producing means 

includes : 

an operation processing program of which 
operation process on said contents information is 
limited based on authority information; and 

a limitation cancellation program for 
canceling the limitation in the operation process of 
said operating . program by sending various kinds of 
information based on said sending location information. 



133. The encapsulated document processing 
apparatus as claimed in claim 132, further comprising 
contents information encryption means for encrypting 
said contents information, which is stored in said 
storage area acquired by said storage area acquisition 
means, according to encryption key information as said 
authority information, wherein said encapsulated 
document transmitting means transmits said encapsulated 
document, which has said contents information encrypted 



by said contents information encryption means and stored 
in said storage area, to said provided-side computer or 
said accessing-side computer through said nerwork. 



134. The encapsulated document processing 
apparatus as claimed in claim 133, wherein said 
limitation cancellation program includes: 

a decryption key producing information request 
program for requesting decryption key producing 
information necessary for producing decryption key 
information for decrypting said contents information, a 
request being sent to said providing-side computer 
through said network based on said sending location 
information ; 

a decryption key producing information 
reception program for receiving said decryption key 
producing information from said providing-side computer 
through said network; 

a decryption key producing program for 
producing said decryption key information based on said 
decryption key producing information received by said 
decryption key producing information reception program; 



and 

decryption program for decrypting said 
encrypted contents information based on said dec: 
key information produced by said decryption key 
producing program. 



135. An encapsulated document processing 
apparatus , comprising: 

decryption key request information receiving 
means for receiving decryption key request information 
from an accessing-side computer through a network, the 
decryption key request for requesting decryption key 
information for decrypting encrypted contents 
information, which is a substance of expression on a 
document ; 

decryption key producing means for producing 
said decryption key information based on said decryption 
key request information received by said decryption key 
request information receiving means; and 

decryption key information transmitting means 
for transmitting said decryption key information, which 
is produced by said decryption key producing means, to 



said accessing-side computer through said network. 



136. The encapsulated document processing 
apparatus as claimed in claim 135, further comprising 
fee-charging means for charging a use fee of said 
contents information to said accessing-side computer 
when said decryption key information is transmitted by 
said decryption key information transmitting means. 



137. An encapsulated document processing 
apparatus , comprising ; 

decryption key production request information 
receiving means for receiving decryption key production 
information request information from a providing-side 
computer through a network, the decryption key 
production information request information for 
requesting decryption key producing information 
necessary for producing decryption key information for 
decrypting encrypted contents information, which is a 
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substance of expression regarding a document; 

decryption key producing information producing 
means for producing said decryption key producing 
information based on said decryption key producing 
information request information received by said 
decryption key production request information receiving 
means ; 

decryption key producing information 
transmitting means for transmitting said decryption key 
producing information, which is produced by said 
decryption key producing information producing on means, 
to an accessing-side computer through said network; and 

fee-charging means for charging a use fee of 
said contents information to said accessing-side 
computer when said decryption key producing information 
is transmitted by said decryption key producing 
information transmitting means. 



ABSTRACT OF THE DISCLOSURE 

An electronic document producing, distributin 
and accessing system prevents a malicious program from 
being mixed into an electronic document without being 
influenced by an operating environment of a computer by 
providing a document producing application and a 
document accessing application by the same application 
provider. In the electronic document having an 
encapsulated document structure, a document information 
file stores document information that is a substance of 
expression of a document. An operating program file 
stores an operating program that materializes the 
document information, a limitation being given to the 
operating program by a security function when the 
operating program is interpreted and executed by a 
computer. The document information file and the 
operating program file are encapsulated as a single 
document . 
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